Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/6be999b5-fb83-3e3f-a429-51952be4a0d4.roa
File:                     6be999b5-fb83-3e3f-a429-51952be4a0d4.roa (raw, json)
Hash identifier:          5XqcySTwXhYlARX8+1yohgeGbFsM8U3Vq29cDDJFMhk=
Subject key identifier:   3C:84:E1:A9:F7:62:33:75:CB:8B:50:99:5B:E6:8D:E5:91:6E:00:BA
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584C794C4845EEA99423697D0F00
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/6be999b5-fb83-3e3f-a429-51952be4a0d4.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     14773
IP address blocks:        2620:1d5:ff1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:48:45:ee:a9:94:23:69:7d:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=2f2d315c-5f4b-438c-9087-d622fbfc585f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:00:09:f8:f4:b6:1d:db:5f:fb:7f:40:60:
                    90:d0:b2:43:21:8b:bc:38:74:3e:47:ff:fc:f0:04:
                    e8:ce:1c:e2:59:61:88:71:f4:8f:8b:3e:03:3a:27:
                    4c:69:9a:de:b7:ff:a0:4f:25:4e:5d:e3:57:b1:25:
                    70:77:a3:ff:cd:05:08:fb:78:ba:63:b9:fa:1a:82:
                    0b:94:51:3d:58:29:ac:4d:33:cf:1a:d1:5f:35:2c:
                    45:b2:bf:be:97:87:86:96:67:c5:fd:c6:f8:d1:ff:
                    b3:59:52:f9:e9:db:14:a1:fb:64:1b:bf:b8:cb:de:
                    5c:ba:dc:6a:29:85:51:d4:d2:4f:a1:40:5d:03:10:
                    11:2f:41:3b:78:4a:2a:1c:93:c8:91:b3:ca:7c:71:
                    20:93:a0:09:20:1d:da:40:50:b7:53:40:2c:6a:9a:
                    cf:0f:c7:5b:10:71:9d:3c:c5:02:df:a0:86:c0:7f:
                    8e:d0:06:0e:b5:68:48:37:83:ab:26:85:11:bf:5b:
                    d1:ac:9b:a3:7c:3c:0b:32:1c:2d:b9:1b:a3:65:f8:
                    ab:8b:47:a4:8d:23:f1:50:6e:65:93:fb:01:4b:2e:
                    ab:ad:25:f4:48:22:48:a3:25:b3:de:71:2d:0d:5b:
                    84:c9:04:1e:2d:ae:9e:21:f0:0c:a6:71:84:93:a0:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:84:E1:A9:F7:62:33:75:CB:8B:50:99:5B:E6:8D:E5:91:6E:00:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/6be999b5-fb83-3e3f-a429-51952be4a0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:ff1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:98:6a:2a:e8:d0:f9:61:03:af:16:8c:0b:fb:67:d6:07:14:
         91:58:6c:21:0d:21:2a:b9:b5:62:77:14:e4:cb:43:ad:5d:67:
         96:40:52:1c:11:d0:1d:31:b0:f0:e6:0a:85:4c:bf:19:bb:a9:
         ad:07:0e:7f:2d:32:27:0a:87:72:85:11:ee:8a:d7:0b:6e:ba:
         33:ba:99:c4:43:62:36:d4:7a:64:be:60:71:08:79:c0:74:bb:
         f9:cc:87:c4:cd:60:0f:a7:ba:40:54:2c:87:10:13:93:14:7f:
         ab:fb:fd:ff:b8:43:13:3c:b0:27:2d:27:4c:fe:c8:13:2b:d4:
         d4:51:6d:96:11:bb:0e:40:e9:33:08:c2:7b:26:c2:65:a3:a7:
         e5:b8:8c:6c:c2:e0:b2:6e:3e:14:a1:5d:b6:2c:05:92:f9:16:
         77:c0:b0:7d:9f:93:96:50:b8:0b:7c:80:fc:74:9e:c3:3e:95:
         c3:c9:ba:80:5a:c9:86:2c:1c:f9:a4:4e:fb:d6:f7:85:b1:6e:
         c3:f9:77:16:f4:7f:16:e2:44:2b:f8:54:ab:bb:7c:ff:57:74:
         bf:83:38:79:e0:04:b4:c1:96:3a:6a:4d:eb:62:cc:97:ef:9f:
         26:c9:99:29:c3:ba:3c:13:54:57:5d:6f:5f:46:b4:8c:e3:06:
         82:93:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:40 2026 by rpki-client